Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          eyNFAgN8XOwo/5fFRTx8fdeksmSv4A4TUQnTKmUdkQI=
Subject key identifier:   86:4F:63:54:16:E5:65:09:8D:D7:FA:9C:44:6E:F8:A4:C8:55:04:AE
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       087B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          087A
Signing time:             Sun 11 Oct 2026 01:58:39 +0000
Manifest this update:     Sun 11 Oct 2026 01:58:39 +0000
Manifest next update:     Tue 13 Oct 2026 01:58:39 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: xggaeRKh3b5idg/W3BWtXtThpV7XdDBiK6by5w6/YwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Oct 11 01:58:39 2026 GMT
            Not After : Oct 13 01:58:39 2026 GMT
        Subject: CN=6acaed4f-d9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:ce:3b:59:dd:14:b5:26:58:58:d8:20:ed:
                    e3:66:b8:d0:46:2a:d7:28:32:79:29:42:df:71:85:
                    ce:b5:9b:b7:1b:02:44:d8:91:7f:dd:cf:ab:e7:0c:
                    2a:41:b4:88:a1:49:a7:fe:3f:8b:87:29:7f:7c:b8:
                    29:53:b2:f5:8c:7f:37:c5:9c:4a:24:78:d6:1c:6d:
                    16:28:ad:c5:b5:a1:55:b1:f3:49:db:88:39:4c:39:
                    58:7b:b0:91:fa:77:8c:d0:70:fb:25:dc:75:2e:31:
                    e2:2b:88:1e:bd:21:68:b4:2d:58:20:54:82:ed:a5:
                    02:ab:a6:a4:7c:05:93:f3:57:bc:76:1b:69:0e:8c:
                    f2:4e:a3:d1:16:fd:94:83:c2:85:73:cd:53:bc:9d:
                    12:bc:a2:83:7c:c3:85:d1:9a:65:24:ab:5e:51:ec:
                    83:63:12:d7:7e:f6:dd:50:78:38:10:44:2c:83:04:
                    4d:5a:94:29:7f:f8:ae:4c:22:ee:07:5b:88:e3:5f:
                    b9:af:2e:4d:6a:96:ee:12:49:2b:84:ad:20:60:b3:
                    7c:79:c3:7e:4c:3b:fa:c5:ef:af:a3:e3:3a:e8:a5:
                    59:44:f2:bb:8e:d9:b3:30:67:0e:91:73:5b:17:f4:
                    ca:5d:51:04:0c:4f:73:04:f0:e9:04:d5:8c:f1:03:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:63:54:16:E5:65:09:8D:D7:FA:9C:44:6E:F8:A4:C8:55:04:AE
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:05:86:09:0a:5d:7b:7e:82:e9:e4:fa:4b:03:c6:d7:c1:
         c3:06:d7:55:0f:40:a4:86:5c:a0:bc:f1:53:57:98:a1:33:09:
         56:12:44:27:38:a3:7d:1e:a4:85:7f:aa:c2:6c:6e:c5:9a:cf:
         d8:35:54:60:2d:cf:6e:50:58:98:c6:67:ab:8e:d1:02:9d:9c:
         41:f2:cd:8b:02:7a:06:ba:b3:df:0c:a9:b4:3b:d7:aa:7b:20:
         e8:e1:9c:8e:34:aa:54:ac:b3:cb:7e:54:96:a3:e1:41:b1:4a:
         b0:5b:3c:cf:cd:54:a1:05:c0:60:51:fa:84:7f:e3:6d:66:34:
         39:c2:a9:a7:09:6e:15:e3:ae:d3:4b:71:ae:ed:ff:26:00:7e:
         bb:c9:4f:42:9f:61:0c:d2:33:43:cb:18:2d:2f:bc:2c:03:e9:
         f4:0a:00:19:c4:df:62:05:7d:e3:fa:d0:d6:88:c9:32:bf:1c:
         0b:61:cc:fb:82:74:e2:6e:1e:30:1e:cd:c6:36:61:9a:9d:de:
         5e:b6:09:12:26:06:4b:b6:57:5e:52:44:10:a3:2d:0a:9f:18:
         a0:d0:b3:0e:10:50:e7:19:ee:1d:2c:fd:36:7a:a0:80:6d:2f:
         97:cc:c2:f5:40:34:1b:ec:06:92:bc:5f:12:bf:39:c9:42:44:
         48:68:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----